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We discuss the equation aP + 2°'bP + cP = in which a, b, and c are non-zero 
relatively prime integers, p is an odd prime number, and a is a positive integer. 
The technique used to prove Fermat's Last Theorem shows that the equation has 
f-H ' no solutions with a > 1 or b even. When a = 1 and b is odd, there are the two 

, trivial solutions (±l,=Fl,±l). In 1952, Denes conjectured that these are the only 

• ' ones. Using methods of Darmon, we prove this conjecture for p = 1 mod 4. We link 

, the case p = 3 mod 4 to conjectures of Frey and Darmon about elliptic curves over Q 

with isomorphic mod p Galois representations. 



> ' 1. Introduction 

00 ■ 

O ' Let p > 5 be a prime number. One knows that Fermat's equation + + = 

has no non-zero integral solutions. Indeed, suppose that + + = 0, where 



O . a, b and c are non-zero. Following G. Frey, one considers the elliptic curve E with 

I equation y"^ = x{x — aP){x + b^). The curve E is simultaneously modular [22, 20] 

and non-modular [18]. Therefore no triple (a, 6, c) with the hypothesized properties 
could have existed. 

Ever since A. Wiles's 1993 announcement that Fermat's Last Theorem can be 
proved along these lines, it has been clear that the proof sketched above can be 
adapted to other Diophantine equations having the skeletal form A + B — C. In 
^ ' particular, suppose that L is a prime number taken from the set 



E = { 3, 5, 7, 11, 13, 17, 19, 23, 29, 53, 59 }. 

The analysis of J. -P. Serre [19, §4.3], combined with the author's theorem [18] and 
the recent work of Wiles [22] and Taylor- Wiles [20] , provides information about the 
family of equations + L'^bP + = 0. 

Theorem 1. Suppose that p and L are distinct prime numbers, with p > 11 and 
L &Yi. Ifa>0, then there are no triples of non-zero integers (a, 6, c) which satisfy 
aP + L'^bP + cP = 0. 

The proof of this theorem can again be summarized succinctly. A non-zero solution 
to aP + L'^bP + cP = would define a semistable elliptic curve E; this curve would 
be modular by [22, 20]. The group of p-division points on E would define an 
irreducible two-dimensional representation p of Gal(Q/ Q) over Fp with very limited 



This article was prepared while the author was a research professor at the MSRI, where re- 
search is supported in part by NSF grant DMS-9022140. This work was further supported by 
the investigator's NSF Grant DMS 93-06898. It is a pleasure to thank R. Borcherds, H. Darmon 



2 



KENNETH A. RIBET 



ramification. Moreover, p would be modular because E is modular. An application 
of the main theorem of [18] would lead to the statement that p arises from the space 
of weight- two cusp forms on ro(2L). As Serre explains in [19], one may deduce a 
contradiction from this statement for L in E. 

This article concerns the case L — 2, i.e., the equation 

(*) + 2"&P + = 

when p is an odd prime. ^ This equation is qualitatively different from those con- 
sidered by Serre, since (★) has the non-zero solutions a = c = —b with a = 1. Their 
presence is connected up with the fact that the elliptic curves E defined by solu- 
tions to (★) are not necessarily semistable. In order to proceed with our analysis, 
we must exploit the fact that the Shimura-Taniyama conjecture holds for all elliptic 
curves over Q defined by equations of the form — x{x — A){x + B), even those 
curves which are not semistable. As K. Rubin and A. Silverberg have observed, 
this extension of Wiles 's theorem follows easily from F. Diamond's refinement [7] 
of the work of Wiles and Taylor- Wiles. Alternatively, a somewhat simplified proof 
of the extended theorem has been given by Diamond and Kramer [8] ; these authors 
appeal directly to [22, 20], rather than to [7]. 

In our analysis, we take a to be an integer between 1 and p—1 without loss 
of generality. Also, for technical reasons we exclude the case p = S. The reader 
interested in this omitted case may consult Vol. II, pp. 572-573 of Dickson's History 
of the Theory of Numbers [9] . According to this History, Euler showed that a"^ + 
4b^ + = has no solutions in non-zero integers, while Legendre established 
that + 2b^ + = has only the trivial solutions with a = c = —b. Recently, 
H. Wasserman [21] has communicated a proof of Euler's result which is inspired by 
the treatment of a'^ + b'^ + c'^ = given by Ireland and Rosen in [12, Ch. 17, §8]. 

When a = 1, the equation + 2W + = states that the three perfect pih. 
powers a^, (—6)^ and form an arithmetic progression. As the author learned 
from R. Tijdeman, there has been considerable interest in arithmetic progressions 
consisting of perfect nth powers. While it is easy to exhibit three perfect squares 
which form an arithmetic progression (e.g., 7^, 13^ and 17^), Fermat stated and 
Euler (among others) proved that four distinct squares cannot form an arithmetic 
progression. (For a discussion, see [9, Vol. II, Ch. XIV].) Furthermore, as Dickson 
reports in [9, Vol. II, Ch. XXII], Euler proved that 2a^±26* is a perfect square only 
when a = 6; in particular, three distinct fourth powers cannot form an arithmetic 
progression. (For a proof of this latter fact, cf. [10, Ex. 4, p. 43].) 

For pth powers (where p is an odd prime). Denes [6] made the following conjecture 
in 1952: 

Conjecture 1. Let p be an odd prime. If x, y and z are non-zero integers such 
that x^, y^ and form an arithmetic progression, then x, y and z are all equal. 

Conjecture 1 amounts to the statement that the only solutions to -\- 26^ -|- = 
in non-zero integers are those for which a = —b = c. In support of the conjecture. 
Denes proved the following theorem [6, Satz 9], which implies the conjecture for all 
odd primes p < 31. 
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Theorem 2. Suppose that p is a regular odd prime for which the order of 2 in 
{TilpTi)* is either an even number or else equal to Suppose further that 2'^~^ ^ 
1 modulo p^ . Then the conjecture is true for p. 

We prove two theorems about the family (★): 

Theorem 3. The equation + 2*^6^ + = has no solution in non-zero 
integers a, h, c if a satisfies 2 < a < p. Furthermore, there are no solutions to 
+ 26^ + = in relatively prime non-zero integers for which 2 divides abc. 

Given that all elliptic curves y'^ = x{x—A){x-\-B) are modular, we obtain Theorem 3 
by mimicing the proof of Fermat's Last Theorem which we sketched above. 

Theorem 4. If p = 1 mod 4, then Conjecture 1 is true for p. 

Theorem 4 is proved by techniques introduced by Darmon in [2, 3]. (See also the 
discussions in [4, §4] and [5, §4.3].) The condition p = 1 mod 4 in Theorem 4 
is needed so that we can apply the work of B. Mazur [15], F. Momose [17], and 
S. Kamienny [13] on the rational points of modular curves associated with split 
Cartan subgroups of GL(2, Fp). In fact, we require as well the secondary hypothesis 
p > 17 to apply this work, so we do not prove Theorem 4 for p = 5orp=13. 
Fortunately, these two primes are covered by Denes's work. 

It is perhaps worth stressing that the hypothesis p =1 mod 4 will disappear as 
soon as theorems for non-split Cartan subgroups become available. 

2. Frey curves 

Let p be an odd prime number. We view (★) as an equation in the three variables 
a, h and c with an auxiliary parameter, a. We can and do assume that we have 
< q; < p. Suppose that (a, 6, c) is a solution to (*) in non-zero relatively prime 
integers. It is immediate then that a and c are odd; i.e., the three monomials 
A = a^, B = and C = are relatively prime. Thus, the congruence a = — 1 
mod 4 will be satisfied after possibly multiplying (a, 6, c) by — 1. We shall normalize 
our solutions by imposing this congruence. With this normalization in place, the 
trivial solutions a = c = —b with a = 1 are reduced to the single triple (a, b, c) = 
(-1,1,-1)- 

Given a normalized solution of {-k), one forms the Frey elliptic curve E with 
equation 

y^ = x{x - A){x -\- B). 
Theorem 5. The elliptic curve E is modular. 

As indicated above, this theorem was pointed out by Rubin and Silverberg, who 
deduced it as a consequence of the results of [7]. After learning of the Rubin- 
Silverberg observation, F. Diamond and K. Kramer gave a more "elementary" proof 
of the theorem in [8]. This latter article applies the work of Wiles and Taylor- Wiles, 
but does not rely on the refinements of [7] . It contains a great deal of information 
about the arithmetic of Frey curves, some of which we shall recall below. 

Because of our normalization, the integer A satisfies A = —1 mod 4; furthermore, 
B is even. These are the conventions that were employed in [19] and [8]. The cal- 
culations of [19, §4.1] show that the conductor Ne of E has the form 2^ rad'(ASC) 
where t is a non- negative integer. Here, we have written rsid' (ABC) for the product 
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primes p ^ 2. The precise value of t is computed by Diamond and Kramer [8], who 
find that t is 5, 3, 3, or 1 according as ord2(-B) is 1, 2, 3, 4, or an integer greater 
than 4. Thus E is semistable at 2 if and only if B is divisible by 16. Since E is in 
any case semistable away from 2, i? is a semistable elliptic curve precisely when 16 
divides B. The minimal discriminant of may be written 2'^[ABC)'^ where u 
is an integer which is calculated in [8]. For instance, u = —8 when t = 1. Therefore 

ord^(As) = mod p 

for all primes £ ^ 2. 

Lemma. The conductor Ne is a power of 2 if and only if (a, b, c) is the trivial 
solution (—1, 1, —1). 

Proof. The solution (— 1, 1, — 1) to (★) for the value a — 1 leads to the elliptic curve 
E = Eq with equation y"^ = x{x + l){x + 2). A translation in x transforms Eq 
into the familiar complex multiplication elliptic curve y'^ = — x oi conductor 32. 
Conversely, suppose that A^^; is a power of 2. Then ra,d' (ABC) = 1, so that ABC 
is a power of 2. Since a = —1 mod 4, we have a — —1. Similarly, the odd number 
c can only be ±1 and b must be a power of 2. The equation — l + 2"6^ + (±l) = 
forces b = 1, a = 1 and ±1 = —1. ■ 

Corollary. // (a, b, c) is not the trivial solution, then E has multiplicative reduction 
at some prime q^2. 

Proof. This is clear since Ne is a power of 2 times a square-free odd number. ■ 

For each prime number £, let E[£\ be the group of ^-division points on E, regarded 
as a two-dimensional representation of Gal(Q/Q) over the field F^. We recall the 
following fact. 

Proposition 1. The representation E[€\ is irreducible for all primes i > 5. More- 
over, if E is not semistable, then E[3] is irreducible. 

Proof. First suppose that E is semistable over Q. Then, as was noted in [19], the 
result to be proved follows easily from a theorem of Mazur [14, 15]. More precisely, 
suppose that £ > 5 and that E[£] is reducible. Then E has a rational subgroup C 
of order £. The semistability hypothesis implies that the action of Gal(Q/Q) on C 
is ramified only at and a local study at £ then shows that Gal(Q/Q) must act 
on C either trivially or via the mod £ cyclotomic character. This implies that some 
elliptic curve over Q which is isogenous to E contains a group of rational points 
which is isomorphic to Z/2Z©Z/2£Z. The existence of such a curve is incompatible 
with Ogg's Conjecture, which was proved by Mazur in [14]. 

Now suppose that E is not semistable; this means that E has additive reduction 
at 2. Then the indicated irreducibility follows from a stronger statement which is 
proved by Diamond and Kramer in [8]: Let / be an inertia subgroup of Gal(Q/Q) 
for the prime 2; then the action of / on E[£] is irreducible if £ > 3. Since the proof 
of this statement is quite elementary, we shall recall it now for the convenience of 
the reader. 

Since E has additive reduction at 2, the 2-part of Ne niay be written 2^+*^, 
where S is the exponent of the Swan conductor of the representation given by the 
action of / on E[£]. As we noted above, 2 + (5 is equal to either 5 or 3; thus 

X ;„ „JJ ™U — A ™„ TT'im ;„ r ™„J,,1„ rpi 
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E[£] is an extension of one 1-dimensional representation by another, and S is the 
sum of the conductors of the two characters associated with the 1-dimensional 
representations. These characters are in fact inverses of each other, since / acts 
trivially on the determinant of E[i]. (This determinant corresponds to the mod £ 
cyclotomic character, which is unramified at 2.) Hence the conductors of the two 
characters are equal, giving that S is even. ■ 

Corollary. Suppose thatp > 5 or thatp = 3 and b is odd. Then E[p] is irreducible. 

Proof. The only point to be checked is that E is non-semistable if p = 3 and b is 
odd. In fact, suppose that p — 3. Then E is semistable if and only if b is even. 
Indeed, if b is even, then 8 divides bP, so that 16 divides B. Conversely, suppose 
that 16 divides B = 2'^bP. Since 1 < a < 2, it is clear that b is even. ■ 

3. Proofs of Theorem 3 and 4 

Suppose that aP -\- 2°'bP + = 0, where the integers a, b and c are non-zero and 
relatively prime, and where a satisfies 1 < a < p. It is evident then that a and c are 
odd. As above, we multiply (a, 6, c) by —1 if necessary in order to ensure that a is 
congruent to 3 mod 4. We again form the Frey curve E : = x{x — A){x + B). In 
the notation introduced above the conductor Ne of E is the product 2* rad' (ABC), 
for some integer t in the set { 0, 1, 3, 5 }. We have t < 3 if and only if the even 
number B is divisible by 4; we have t = 5 in the contrary case. We will suppose 
from now on that p > 5. 

We first prove Theorem 3, i.e., that t = 5. Because p > 5, we may deduce from 
the Corollary to Proposition 1 that the representation 

p: Gal(Q/Q) ^ GL(2, Fp) 

defined by E[p] is irreducible. It is modular of level A'"^; (i.e., it arises from the 
space of weight- two cusp forms on ro(Ar^)) because E is a modular elliptic curve 
of conductor Ne- Since A^; is a perfect pth power times a power of 2, the represen- 
tation p is finite at each prime £ ^ 2. The main theorem of [18] thus implies that 
p is modular of level 2*. (Each odd prime £ dividing Ne can be jettisoned from 
the level of p.) We conclude that t = 5, since there are no non-zero cusp forms of 
weight two on ro(8). Equivalently, ord2(-B) = 2, as asserted by Theorem A. 

Remark. In the omitted case p = S, suppose that b is odd. Then £'[3] is again an 
irreducible representation, and the argument we have given may be used to deduce 
that a = 1. 

Continuing the argument, we now prove Theorem 4. Let Eq again be the elliptic 
curve which is associated with the trivial solution (—1,1,-1), i.e., the elliptic curve 
over Q with equation = — x. 

Proposition 2. The two-dimensional mod p representations o/Gal(Q/Q) which 
are defined by E and Eq are isomorphic. 

Proof. Let p be the mod p representation which is defined by E, i.e., by the space 
E\p\ of p-division points of E; let po be the analogue of p for Eq. We have seen 
that the irreducible representation p is associated with an eigenform in the space 
of weight-two cusp forms on ro(2*) = ro(32). It is a known fact that this space is 

j;™ ; 1. ; 1 — j-U, T /'oo^ ;„ „ll;„j-;„ „ /c — , fi „ i ocl ^ tj- 
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follows that p is the mod p representation Jo (32) [p] . In particular, the isomorphism 
class of p is independent of the solution (a, 6, c) giving rise to E. Therefore, p and po 
are isomorphic, as stated. ■ 

We next recall the well known fact that the image of po is contained in the 
normalizer of a Cartan subgroup of GL(2, Fp). Indeed, let R = Z[n4] be the full 
ring of endomorphisms of Eq. Then Eo[p\ is easily seen to be a free rank-1 module 
over R/pR. Let C be the image of {R/pR}* in the group of automorphisms of i?o[p], 
so that C is either F* x F* or F*2 , according as p is congruent to 1 or to —1 mod 4. 
Then C is a Cartan subgroup of Aut Eo\p\ GL(2, Fp). One says that C is split or 
non-split according as p is 1 or— 1 mod 4. The restriction of po to Gal(Q/Q(\/— 1)) 
takes values in C, and the full image of p takes values in the normalizer of C 
in GL(2, Fp). The index of C in its normalizer is 2. 

Suppose now that p = 1 mod 4. Then E defines a point on the modular curve 
denoted Xspiit(p), cf. [14, Ch. Ill, §6] and the discussions in §3 and §4e of [15]. 
This circumstance puts strong constraints on the set of prime numbers dividing the 
denominator of the j'-invariant of E, i.e., the set of primes at which E does not have 
potential good reduction. Specifically, if p > 17, a result of Mazur [15, Cor. 4.8] 
proves that E has potential good reduction at all primes £ 2,p satisfying £ ^ ±1 
mod p. (This result holds also for p = 11, but this is irrelevant to our application, 
which requires p = 1 mod 4.) Mazur's theorem has been strengthened by subsequent 
work. In particular, F. Momose [17, Prop. 3.1] proves that E has potential good 
reduction at all primes i 2, as long as the prime p satisfies p > 17. 

Alternatively, under the same hypothesis onp, Darmon notes in [2, Cor. 1.7] that 
E has potential good reduction at all primes £ 7^ 2, 3; this observation is obtained 
by combining a theorem of Kamienny [13] with [15, Cor. 4.3]. Darmon's result 
concerns elliptic curves over Q(v^^) and requires only that E possess a rational 
subgroup of order 2p over this field. 

Suppose now that we have p > 17 and p = 1 mod 4. Then if (a, b, c) is a nor- 
malized solution to + 2W -|- = 0, the corresponding curve E has multiplicative 
reduction at all odd primes I dividing ahc. Momose's result implies that there is 
no such prime; Darmon's implies that 3 is the only possible such prime. On either 
count, we find that two of a, h and c are ±1 while the third is ±3" for some n > 0. 
Indeed, a, h and c are relatively prime and all of them are odd in view of Theorem 3. 
Elementary reasoning allows us to reach a contradiction. 

4. A CONJECTURE OF FREY 

Conjecture 2. Let A be an elliptic curve over Q. Then all sufficiently large 
prime numbers p have the following property: if B is an elliptic curve over Q for 
which A[p\ and B[p\ are isomorphic representations of Gal(Q/Q), then A and B 
are isogenous over Q. 

Conjecture 2 appears as Conjecture 4.3 in [4], where it is attributed to G. Frey. It 
is similar in flavor to the conjectural statements in Prey's article [11]. The reader 
is invited to consult Mazur's article [16] as well as [4] and [11] for variants and 
generalizations. Here is one such generalization [4, Conj. 4.4 and Conj. 4.5]: 

Conjecture 3. There is an integer t > with the following property. Suppose 
that A and B are elliptic curves over Q and that the Galois representations A\p\ 
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We record the following simple observation: 

Proposition 3. Suppose that Conjecture 2 is true. Then Conjecture 1 holds for 
all sufficiently large prime numbers p. 

Proof. Suppose that (a, 6, c) is a normalized solution to + 2}f + = 0. HE is 
the associated Frey curve, then we have seen that E\p] and Eq\p] are isomorphic. 
Applying Conjecture 2 with A = £'o, we find that E and Eq are isogenous for 
p sufficiently large. The isogeny relation between E and Eq implies that these 
two elliptic curves have the same primes of bad reduction, so that E has good 
reduction outside 2. By the lemma of §2, this implies that {a,b,c) — (—1, 1, —1). 
Hence + 26^ + = has only the trivial normalized solution for sufficiently 
large p. ■ 
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